I recently setup centralized authentication system using OpenLDAP. Now I need to extend the users that are defined in the database to include a new object class that contains some security related data about them. How can I modify the existing entries to add this new object class? I'm pretty new to LDAP so don't bite my head off if I managed to ask a stupid question :P Thanks!
You can run
As an example (taken straight from openldap manual), if your file contains this it'll add/modify all those fields
OpenLdap Schema and ObjectClass are easy to extend. Look inside bundled schema if there is the object of your needs (located, on a debian filesystem is /etc/ldap/schema)
After you can modify your ldap entities and attached to them new objectClass (and, by extension, new attribute types).
If you want to build your own attribute type and/or your own objectClass you need to request an OID object number (OID Registration).
Then follow this schema :
Then define your attribute type:
And your object class:
The number following the YOUR_ATTRIBUTETYPE/YOUR_OBJECTCLASS must be unique (ie : one number for each attribute)
For reference, have a look at Open LDAP Schema Specification